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Amendments to the Claims 

The following listing of the claims replaces all previous listings and versions of the claims in 
the application: 

5 Listing of the Claims 

i 

1 . (original): A computer system for providing security awareness in an organization, 
comprising: 

a memory means, constituted by a hard disk or Random Access Memory device, 
10 a central processor unit connected to said memory means, 

an input device, constituted by a mouse or keyboard device, connected to said central 
processor unit, for the input of a piece of security information into said computer system for 
storing said security information in said memory means as an information security object, 

an output device, constituted by a printer or display device, connected to said central 
1 5 processor unit for the output of security information, 

a policy module communicating with said input device and said memory means for 
the conversion of said piece of security information into said information security object to be 
stored in said memory means, and 

a survey module communicating with said memory means and said output means for 
20 generating from said information security object an element of a questionnary to be output by 
means of said output device. 

2. (original): The computer system according to claim 1, further comprising an educational 
module commimicating with said memory means for receiving through said input device a set 

25 of answers to said questionnary and for comparing said set of answers of said questionary 
with said information security objects for determining the correct and the incorrect answers, 
and generating, based on said incorrect answers, an educational program to be output by 
means of said output device. 



30 3. (original): The computer system according to claim 2, said set of answers being stored in 
said memory means. 

4. (original): The computer system according to any of the claims 1-3, said memory means 
being organized as a database. 
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5. (currently amended): The computer system according to any of the claims [[1-4]] l^l, said 
computer system constituting a stand alone computer or altematively a computer system in- 
cluding a network and a plurality of PC's each including an input device and an output device 
to be operated by a respective user. 

5 

6. (currently amended): The computer system according to any of the claims [[1-5]] iO, said 
central processor unit controls in said conversion of said piece of said security information 
into said information security object, said policy module to check in said memory means the 
possible presence of a corresponding security information object. 

10 

7. (original): A method of providing security awareness in an organization, comprising the 
steps of providing a piece of security information, storing said piece of security information 
in a memory means as an information security object, said information security object being 
generated in a policy module, generating in a survey module an element of a questionnary 

1 5 from said information security object and output said questionnary including said element. 

8. (currently amended): The method according to claim 7, further comprising any of the f e a 
tm- e s^ the computer system according to any of the claims [[1-6]] U^.j 
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